Look Who it Was Random video

Andrew Lee-Thorp - Intent on Being a Good Android Citizen?

372 views · Published 4 July 2014 · 39:28 · Indexed 30 October 2026

Channel: OWASP Foundation · 2014 · Science & Technology

Watch on YouTube

From AppSecEU 2014 in Cambridge
https://2014.appsec.eu/

Has Android achieved the impossible? Do intents enable interprocess communications and inter-process collaboration that is actually securable? The answer, as in many platforms, is a definite 'maybe'. Firstly, intents invite "new" attacks - attacks more traditionally associated with distributed systems - such as spoofing, hijacking, out of order execution and theft of data. Secondly, all is not always as it seems. Like so many things in in life, it is possible to do things right and still get it wrong. Securing intents properly requires a defensive approach of some old techniques plus an added step of validating some assumptions. This talk is aimed mainly at app developers - learn how intents work under the hood, how to secure your intents and how to secure your assumptions to achieve your goal of secure apps. 

Speaker

Andrew Lee-Thorp
Senior Consultant
Andrew Lee-Thorp is a security consultant with over 10 years of experience cutting his teeth in development from smart cards through to enterprise server systems. He currently works as a Senior Consultant with Cigital Ltd where he performs code reviews, architectural risk analysis, and leads a small band of Android assessors in Europe. His favourite activity is bug-hunting C/C++ code but he is not averse to actually building software from time to time. In a previous life Andrew was an... 


-

Managed by the official OWASP Media Project https://www.owasp.org/index.php/OWASP_Media_Project

More from this channel